Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/f2478f-c503-42c2-94b2-b166ae2ef287/1/MUh4ooRThW01wlrIg0F7hFUHl1o.roa
File: MUh4ooRThW01wlrIg0F7hFUHl1o.roa (raw, json)
Hash identifier: HwmzBB+fbp6XnJDbPTGvUMNMKpi4Ls7AfwMTB7E5nRQ=
Subject key identifier: 31:48:78:A2:84:53:85:6D:35:C2:5A:C8:83:41:7B:84:55:07:97:5A
Certificate issuer: /CN=d31dd1a514d3a7e3dfdb8bfb75d7d24ed98d479f
Certificate serial: 01856DDD4E8E7F27CFBD4649A361CA2B9738
Authority key identifier: D3:1D:D1:A5:14:D3:A7:E3:DF:DB:8B:FB:75:D7:D2:4E:D9:8D:47:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0x3RpRTTp-Pf24v7ddfSTtmNR58.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/f2478f-c503-42c2-94b2-b166ae2ef287/1/MUh4ooRThW01wlrIg0F7hFUHl1o.roa
Signing time: Sun 01 Jan 2023 15:04:58 +0000
ROA not before: Sun 01 Jan 2023 15:04:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2830
IP address blocks: 193.58.223.0/24 maxlen: 24
193.58.222.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:dd:4e:8e:7f:27:cf:bd:46:49:a3:61:ca:2b:97:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d31dd1a514d3a7e3dfdb8bfb75d7d24ed98d479f
Validity
Not Before: Jan 1 15:04:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=314878a28453856d35c25ac883417b845507975a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:18:1d:79:2d:36:f8:d4:73:a0:da:57:b2:5a:
db:90:fe:3c:b5:6e:66:dc:e3:be:29:2b:5f:21:f5:
b4:e1:02:0d:94:e5:94:97:1e:f5:a3:48:6c:a0:6d:
ec:b5:2a:6c:de:32:a7:dc:c0:7b:69:77:db:a3:7c:
ef:96:20:48:81:ca:e6:65:cf:f9:74:4f:d8:94:cd:
f9:a3:3f:9c:5d:20:6e:13:c9:ed:83:aa:cf:c8:18:
23:ed:8a:2a:00:4e:1d:a8:c6:7a:56:3e:4f:c4:1d:
e4:0c:48:11:69:14:00:5d:f3:b5:24:c5:17:2e:dd:
ac:20:21:86:de:9f:35:2e:20:30:6f:cd:f2:fc:22:
50:e4:b6:83:6f:34:61:d6:aa:d9:78:29:74:76:3e:
b7:d9:d9:e5:0e:e4:27:48:93:e7:66:7e:6c:21:c8:
d3:d6:45:f7:ee:58:10:46:f8:c1:0a:15:4e:9c:bb:
85:47:d8:61:39:60:38:10:c6:42:fd:f2:e8:50:b7:
5f:52:34:eb:10:e6:94:b8:4c:47:7a:76:7e:cf:c2:
f6:aa:f6:e4:10:ea:22:18:ad:e9:67:80:09:c0:ed:
d6:67:b6:96:eb:b7:76:18:0c:ae:5d:af:2f:4e:c3:
b6:35:92:93:7d:f5:42:3c:94:d1:fa:4e:cd:37:7d:
f7:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:48:78:A2:84:53:85:6D:35:C2:5A:C8:83:41:7B:84:55:07:97:5A
X509v3 Authority Key Identifier:
keyid:D3:1D:D1:A5:14:D3:A7:E3:DF:DB:8B:FB:75:D7:D2:4E:D9:8D:47:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0x3RpRTTp-Pf24v7ddfSTtmNR58.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/f2478f-c503-42c2-94b2-b166ae2ef287/1/MUh4ooRThW01wlrIg0F7hFUHl1o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/f2478f-c503-42c2-94b2-b166ae2ef287/1/0x3RpRTTp-Pf24v7ddfSTtmNR58.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.58.222.0/23
Signature Algorithm: sha256WithRSAEncryption
99:b9:bf:15:29:79:92:aa:75:5e:23:2c:bc:6c:74:d1:60:02:
67:09:f5:6b:5c:7c:a9:94:37:f2:f7:e9:56:ec:63:7b:78:4a:
e7:45:e6:dd:5d:03:ca:36:9d:1f:ee:a5:52:07:f5:e3:c5:b3:
3b:23:6a:f6:88:01:f8:1e:4d:75:63:34:71:60:76:7e:b8:86:
72:ed:80:30:6b:7d:51:18:49:31:50:6b:48:7b:0b:f9:e7:c4:
0e:f5:a3:53:d8:74:8c:90:f3:95:6c:01:49:34:7e:1d:a5:eb:
a7:b2:97:06:51:a8:78:35:69:9d:87:a7:cb:1e:d1:10:d7:4e:
dd:92:f0:5d:80:a6:c6:24:1f:fb:26:2c:36:22:e0:e5:25:9c:
17:ba:26:d3:93:11:78:07:62:a5:67:c3:74:56:e9:e3:d6:e7:
30:fd:d9:ad:7f:a3:13:ab:08:1b:0f:ba:46:bc:49:dd:2a:bf:
6c:c4:c0:a7:e2:dc:f9:b4:ec:4e:61:00:13:f6:c7:98:9d:e3:
b3:ea:95:85:03:7a:66:29:c9:59:06:9c:3f:a1:66:e1:d5:87:
da:d9:42:c5:21:30:e7:84:a6:0e:cc:fb:a9:36:24:f6:37:60:
5e:d3:1f:3f:ac:32:c6:98:02:37:c1:bd:4a:42:34:17:dc:3c:
b1:19:80:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:17:30 2025 by rpki-client